Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/4QrqTeH17AXNTy8pbTdrujVUbQI.roa
File: 4QrqTeH17AXNTy8pbTdrujVUbQI.roa (raw, json)
Hash identifier: FZeq9SJr8r+vs6lCOy39Gvb+wDR+3HmqIg9DlvmdZfk=
Subject key identifier: E1:0A:EA:4D:E1:F5:EC:05:CD:4F:2F:29:6D:37:6B:BA:35:54:6D:02
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 019423D721416CF874F9E27CEF83DE9A8DB3
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/4QrqTeH17AXNTy8pbTdrujVUbQI.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50487
IP address blocks: 195.191.104.0/23 maxlen: 23
195.191.104.0/24 maxlen: 24
195.191.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:21:41:6c:f8:74:f9:e2:7c:ef:83:de:9a:8d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e10aea4de1f5ec05cd4f2f296d376bba35546d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:4e:7b:4b:05:10:87:27:9e:ea:8c:a0:3e:
de:0d:02:19:d2:71:59:82:de:01:26:2d:58:58:68:
3d:0f:d5:d2:3c:64:83:c6:72:3e:42:78:a5:c5:3f:
54:4c:10:87:83:55:49:16:0c:b2:76:cd:ed:89:f0:
4b:62:4a:65:32:b5:35:c8:cd:cf:3a:27:1f:38:3a:
41:de:41:55:a0:31:f1:87:9a:ab:17:23:0d:77:f3:
40:cb:04:a3:f1:c1:1a:b4:63:f8:2d:06:d5:b5:ba:
33:fd:66:6e:2e:bc:e3:20:6e:1f:a2:f9:b8:14:dc:
04:bb:99:b1:a1:54:06:b4:45:41:01:df:43:72:f7:
7e:d5:f4:91:dc:6c:79:e6:12:9f:ba:14:c8:b7:ca:
19:e6:c1:a3:ea:45:d7:e7:db:0d:de:71:09:2b:3a:
e1:cf:a5:ff:d4:f8:67:95:ff:a4:88:9f:e0:28:3b:
80:ec:db:10:0f:00:b0:26:2d:0e:ff:56:44:92:06:
38:b4:84:ad:c6:93:c2:13:1a:79:ea:cc:8b:f3:db:
e8:c0:b9:ae:58:0c:73:f1:59:9c:77:16:7c:1c:85:
ee:80:4b:06:26:fe:ed:0a:b9:b2:86:3f:8e:cf:23:
fc:a8:43:eb:04:b9:1d:09:00:ac:c3:18:23:bf:ca:
d5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0A:EA:4D:E1:F5:EC:05:CD:4F:2F:29:6D:37:6B:BA:35:54:6D:02
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/4QrqTeH17AXNTy8pbTdrujVUbQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.104.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:5c:af:bb:06:68:16:9d:f5:00:ba:f1:49:67:be:63:0c:99:
bf:08:1c:90:de:4b:16:93:f4:6d:d9:fe:14:13:b4:69:68:68:
69:0d:7b:25:21:3d:cb:8b:eb:2c:74:fa:b3:25:53:15:52:04:
a6:72:a4:c4:16:5f:af:6d:20:46:7a:63:1c:c2:97:3a:ab:ad:
29:c4:12:b6:89:25:63:c8:4b:ab:76:f1:f8:15:d5:6c:74:e7:
74:00:f1:73:b9:94:39:15:98:74:7d:d9:0b:fe:8b:78:e2:95:
4b:96:57:dd:d2:72:1c:a9:fd:b0:46:f0:df:ba:77:bb:2c:b4:
11:25:3a:16:62:f1:b8:85:2f:00:b3:82:57:ad:c2:8d:7f:b0:
dc:86:a6:76:bf:ce:a4:08:9a:ab:d8:bd:24:56:35:13:e2:a5:
df:ef:4f:1c:8a:46:ad:ca:00:a0:26:7b:0b:27:96:28:2c:ac:
4d:22:9d:c5:07:6a:88:5a:3a:a6:c3:5f:8d:92:e8:5b:ca:21:
c6:ab:aa:a3:5e:65:40:11:9b:0f:c3:ef:0a:6a:58:d5:c4:ff:
98:a5:7b:43:a9:46:3a:dd:20:ba:3b:46:d6:11:fe:f5:57:30:
c1:05:5e:a0:0f:d7:c5:3f:b6:fc:37:e1:c3:4b:b1:d1:97:10:
a1:48:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:51:10 2025 by rpki-client